General
- Target 2026-07-07_9caf567fd889b5ab4c86f1fec7d54b6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- Sample260707-h8dpcsct9x
- SHA256 8db345631c902ce8a878c4b040da18b147b9d144c2c7c047583bfa0c96545aa7
- MD5 9caf567fd889b5ab4c86f1fec7d54b6c
- SHA1 e23573f80c30d842f46913c2ab743b7be4481631
- SHA512 89a6627c5459841ad054541630fe0e102720d82214414275583f1d63027f92b69721130fa11c87e1ea428b107cbaaa9a94febab7048f489298bec3026ad8e47b
- SSDEEP 49152:RRabkC5IwkRkLC7xOULB0a2iidX5uP+MJluXLXkuL:2UxR6+nYWLuXLXkuL
- TLSH T1CBA5AE23E75854EAE036C135CA530723EB72B447173196DF22D81E292F93BA01F7AB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_9caf567fd889b5ab4c86f1fec7d54b6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_9caf567fd889b5ab4c86f1fec7d54b6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_9caf567fd889b5ab4c86f1fec7d54b6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- SHA256 8db345631c902ce8a878c4b040da18b147b9d144c2c7c047583bfa0c96545aa7
- MD5 9caf567fd889b5ab4c86f1fec7d54b6c
- SHA1 e23573f80c30d842f46913c2ab743b7be4481631
- SHA512 89a6627c5459841ad054541630fe0e102720d82214414275583f1d63027f92b69721130fa11c87e1ea428b107cbaaa9a94febab7048f489298bec3026ad8e47b
- SSDEEP 49152:RRabkC5IwkRkLC7xOULB0a2iidX5uP+MJluXLXkuL:2UxR6+nYWLuXLXkuL
- TLSH T1CBA5AE23E75854EAE036C135CA530723EB72B447173196DF22D81E292F93BA01F7AB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.